TURN protocol : Permissions for remote users

Question

I am implementing TURN protocol for ICE. If the remote party sends its HOST,SERVER-REFLEXIVE and RELAYED-REFLEXIVE addresses in SDP ,should we create permissions to ALL(host,SERVER and RELAYED ) the remote candidates in the TURN server OR just to RELAYED-REFLEXIVE address ?

Thanks and Regards

Answer 1

I believe you need to set permissions for all known IP addresses of the remote host. The usual connectivity with TURN will be with the SERVER-REFLEXIVE address of the remote host.